Heartbleed Defense-in-Depth Part #1: Preventing Admin Session Hijacking
duosecurity.com